I’ve lost count of how many breach disclosures I’ve read where the first sentence is some version of “no evidence the perimeter was compromised.” It used to strike me as corporate hedging. Now I read it as the whole story, hiding in plain sight. The perimeter wasn’t compromised because, increasingly, nobody bothers attacking it.